PATENT 
Docket No. 0023-0183 



UNITED STATES PATENT APPLICATION 



OF 



PRADEEP SINDHU 



FOR 



DISTRIBUTED ADMISSION CONTROL 



PATENT 
Docket No. 0023-0183 



DISTRIBUTED ADMISSION CONTROL 

RELATED APPLICATIONS 
[0001] This application claims priority under 35 U.S.C. §119 based on U.S. Provisional 

Application No. 60/463,442, filed April 16, 2003, the disclosure of which is incorporated herein 
by reference. 

BACKGROUND OF THE INVENTION 
[0002] The present invention relates generally to networks and, more particularly, to 

admission control in networks. 

[0003] Data experiences latency and jitter (variances in latency) as it travels through a 

network from a source to a destination. Latency may be caused by several characteristics of the 
network, such as the communications medium the data is transported over, processing of the data 
as it travels through the network, congestion in the network, and other factors. Some causes of 
latency are unavoidable, such as physical limits of transport media. An example of a physical 
limit is the speed of light in an optical transport medium. Depending on the application, some 
latency and jitter may be acceptable. For example, for some applications it may be acceptable to 
have a certain average latency, latency variance, or some combination of these. At some point, 
however, long latency and high jitter become unacceptable for most applications. 
[0004] Fig. 1 illustrates the relationship between offered traffic load and latency in a 

network. As the offered load of traffic to the network increases, latency also increases. This 
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general relationship between latency and offered load is a fundamental property of networks. At 
some point the amount of latency becomes unacceptable, which is generally defined as the point 
of congestion. Congestion is denoted in Fig. 1 by the horizontal line labeled "congestion " 
Below the congestion line congestion does not occur, which is characterized by traffic that has 
acceptable latency and/or jitter characteristics. Above the line, congestion occurs. Congestion is 
characterized by traffic having unacceptably high latency, jitter, or both. When there is almost 
no load, latency drops to the lowest delay the network is capable of. 

[0005] Examples of latency-sensitive applications include voice, video, and real-time 

applications that need data to reach a destination within a certain time period. For latency- 
sensitive applications, there are negative consequences if latency and jitter between a source and 
a destination is above a certain threshold. Voice data, for example, may suffer from discernible 
audio glitches at the destination. Similarly, if video data is subjected to high latency and jitter 
the visual quality of the video data will be degraded at the destination. Therefore, these types of 
data are often transmitted over circuit-switched networks that maintain required latency 
guarantees for the data, thus eliminating degradation caused by latency and jitter at the 
destination. For other applications, such as e-mail and file transfers, high latencies (within 
limits) may cause little or no discernible degradation at the destination. 
[0006] Connectionless networks, such as the Internet, do not guarantee bandwidth. Thus, 

networks entirely or partially made up of connectionless networks are not set up to guarantee 
maximum latency levels from end to end. Rather, in a network that is entirely or partially a 
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connectionless network, latency and jitter increase when load on the network increases and 
decrease when the load on the network decreases. Furthermore, latency and jitter may increase 
in certain parts of a network and decrease in other parts. Therefore, it is difficult to convey 
latency- and jitter-sensitive data in such networks. Without a mechanism to specifically control 
latency and jitter, networks that are entirely or partially connectionless are not appropriate for 
carrying latency- or jitter-sensitive data. 

SUMMARY OF THE TNVENTION 
[0007] According to one embodiment of the invention, systems and methods consistent 

with the principles of the invention perform distributed admission control by determining a state 
of network resources, and then determining whether to initiate a data transfer based on the state 
of the network resources. The determination of whether to initiate a data transfer between a first 
and second client is made by an admission control facility (ACF) that sends packets to the 
second network client, monitors acknowledgment packets for each sent packet, analyzes the 
acknowledgment packets to determine a state of the network resources, and decides whether to 
initiate a data transfer between the clients based on the analysis. 

[0008] The acknowledgment packets may be analyzed by the ACF in a variety of ways. 

For example, the mean, variance, or combination of mean and variance of the response times 
may provide an indication of whether network resources can handle more traffic. The ACF may 
also analyze other factors, such as packet loss based on packets that are not acknowledged by the 
second network client. The ACF may decide whether to initiate a data transfer based on an 
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analysis of one or more of these characteristics of the acknowledgments. Other admission 
control analyses may also be performed by the ACF using the mean, variance, or packet loss 
calculations, some combination of these, or some combination of these and other factors. 
[0009] In networks that enable setting up a path through the network, such as a label- 

switched path, the ACF may send packets along one or more potential paths, analyze the 
acknowledgment packets received in response to the packets, and select a path a based on the 
acknowledgment analysis. The ACF may decide that a data transfer with the second client 
should not be initiated if no suitable path is found. If no path is found the ACF may then repeat 
the analysis for some or all of the paths at a later time. 

[0010] Other aspects of systems, devices, and methods consistent with principles of the 

invention are described herein. It should be understood that both the foregoing general 
description and the following detailed description are exemplary and explanatory only and are 
not restrictive of the invention as claimed. 

BRIEF DESCRIPTION OF THE DRAWINGS 
[0011] The accompanying drawings, which are incorporated in and constitute a part of 

this specification, illustrate several embodiments of the invention and together with the 
description, serve to explain the principles of the invention. 

[0012] Fig. 1 is a diagram that illustrates the relationship between load and latency in a 

network; 
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[0013] Fig. 2 illustrates a network using distributed admission control consistent with the 

principles of the invention; 

[0014] Fig. 3 illustrates a system for performing distributed admission control consistent 

with the principles of the invention; 

[0015] Fig. 4 illustrates an embodiment of acknowledgment analyzer 3 1 0 consistent with 

the principles of the invention; 

[0016] Fig. 5 illustrates a flowchart implementing distributed admission control 

consistent with the principles of the invention; and 

[0017] Fig. 6 illustrates a flowchart for implementing distributed admission control in a 

network having a path mechanism, consistent with the principles of the invention. 

DESCRIPTION OF EMBODIMENTS 
[0018] Reference will now be made in detail to embodiments consistent with the 

principles of the invention, examples of which are illustrated in the accompanying drawings. 
The same reference numbers may be used in different drawings to refer to the same or like parts. 
[0019] Some types of network applications are more latency- and jitter-sensitive than 

others. For latency- and jitter-sensitive applications, it is common to have a service-level 
agreement (SLA) between the customer and the service provider that requires the service 
provider to deliver data, such as latency-sensitive data, within specific parameters. For example, 
the SLA may include maximum latency and jitter requirements, as well as other service level 
requirements. 
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[0020] In accordance with the principles of the invention, latency- and j itter-insensitive 

data is allowed in the network without controls or checks. For latency- and jitter-sensitive data, 
however, distributed admission control is carried out. According to embodiments consistent with 
the principles of the invention, distributed admission control may be carried out by sending one 
or more reflector packets to a destination and analyzing acknowledgments received in response 
to the one or more packets. More particularly, in order for a first network client to set up a data 
transfer with a second network client, the first network client notifies an admission control 
facility (ACF) that it would like to initiate the transfer. Before initiating the transfer, the ACF 
performs admission control to determine the state of network resources between the first client 
and second client. For example, the ACF may determine whether network resources between the 
source and destination have low enough latency and jitter levels to meet the requirements of an 
SLA for the data to be transferred between the first and second network clients. 
[0021] The ACF performs admission control by sending one or more reflector packets 

through the network to the second network client. The second network client responds to each 
received reflector packet by sending an acknowledgment packet back to the ACF. The ACF 
analyzes the acknowledgment packets and decides whether to initiate a data transfer between the 
first and second client. 

[0022] In an alternative embodiment, two ACFs exchange packets in a similar manner. 

For example, one ACF may be associated with the sending end and one ACF may be associated 
with the receiving end of a data transfer. Using admission control consistent with principles of 
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the invention, the sending end ACF can determine the state of the network resources between the 
sending and receiving end ACFs. Based on the determined state, the ACF associated with the 
sending end determines whether to initiate a data transfer between the first and second client. 
[0023] Admission control techniques consistent with the principles of the invention may 

be used to implement distributed admission control in a variety of scenarios. For example, the 
techniques may be used in one-to-one, one-to-many, many-to-one, and many-to-many data 
transfer scenarios. 

[0024] Fig. 2 illustrates a network 200 in which distributed admission control is 

performed in a manner consistent with the principles of the invention. Network 200 connects 
various network clients, such as a video server 202, a streaming content web site 204, a 
telephone 206, an audio server 208, a handheld device 210, a telephone 212, a telephone 214, a 
brokerage site 216, and a laptop 218. Clients 202, 206, 208, and 212-218 are connected to 
network 200 via ACFs 220-232. Clients 204 and 2 1 0 are not connected to network 200 via 
ACFs. 

[0025] Network 200 may be one network or a collection of connectionless and/or 

connection-oriented networks. Depending on the composition of the network, network clients 
202-21 8 may or may not be able to establish a guaranteed-bandwidth connection between 
themselves through network 200. Consistent with the principles of the invention, each of ACFs 
220-232 determines whether to initiate a data transfer between one or more first network clients 
and one or more other network clients by analyzing the state of resources in network 200 
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between the first network client and the other clients. The state of resources is determined by an 
ACF sending one or more reflector packets to one or more ACFs and/or network clients, 
receiving acknowledgment packets in response to each reflector packet, and analyzing 
characteristics of the acknowledgment packets. The analysis provides an indication of the state 
of resources in network 200. The ACF uses the state analysis to determine whether to initiate a 
data transfer between the first network client and one or more other network clients. 
[0026] In this way, admission to network 200 is distributed out to ACFs 220-232. Basing 

admission on the state of network 200 resources allows latency and jitter in network 200 to be 
managed. Performing admission control at ACFs 220-232 also removes the need to maintain 
state, such as connection state, within elements of network 200 for purposes of managing latency 
and jitter, as is sometimes done in networks. The amount of state needed to maintain 
connections can be very large, on the order of N 2 , where N is the number of clients in the 
network. Performing admission control at ACFs 220-232 also eliminates the need to maintain 
global network state within an ACF. 

[0027] Using telephone 212 and ACF 232 by way of example, suppose a caller at 

telephone 212 wants to access information on audio server 208. The caller initiates the call by 
picking up the handset of telephone 212. Telephone 212 indicates to ACF 232 that a call should 
be set up with audio server 208. ACF 232 determines whether to set up the call between 
telephone 212 and audio server 208 by using admission control, consistent with the principles of 
the invention. ACF 232 first sends one or more reflector packets to audio server 208. As each 
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reflector packet is sent, ACF 232 may start tracking, for example, the response time it takes to 
receive an acknowledgment packet from audio server 208 for each reflector packet. ACF 232 
may also monitorother characteristics of the acknowledgment packets in addition to or instead of 
response time.Generally, an ACF may send two types of packets, referred to generally as 
"reflector" packets. The first type of reflector packet, called a "time delay" packet, is used 
primarily to determine how long it takes to receive an acknowledgment packet. An example of a 
time delay packet is a ping packet. The second type of reflector packet, called a "control" 
packet, has some purpose beyond eliciting an acknowledgment. A control packet may, for 
example, be used to establish a session, initiate a data transfer, set up a path, or perform some 
combination of these operations. Acknowledgments to control packets may be also analyzed, 
like the acknowledgments to time delay packets, to determine the state of network resources 
between two or more clients. A combination of these types of packets may also be used. 
[0028] For example, ACF 232 may send one or more setup packets to audio server 208 

for establishing a path, connection, or session between telephone 212 and audio server 208. 
Audio server 208 may acknowledge the packets in some way. ACF 232 analyzes the 
acknowledgments and determines whether or not to set up the data transfer. If ACF 232 
determines that a data transfer should not be initiated, ACF 232 may simply stop sending 
packets, thus terminating communication with audio server 208. 

[0029] ACF 232 may also send packets having particular characteristics to determine 

how latency and/or jitter impact packets having these particular characteristics. For example, 
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ACF 232 may send packets having different lengths or types of data. Depending on the 
characteristics of the acknowledgements to these packets, ACF 232 may decide whether to set up 
a data transfer. 

[0030] Audio server 208 responds to each reflector packet by sending an 

acknowledgment packet back to ACF 232. In another embodiment, instead of audio server 208 
receiving and responding to the packets, ACF 228, the ACF associated with it, handles the 
reception of reflector packets and response. 

[0031] As each acknowledgment packet arrives, ACF 232 may log the acknowledgment. 

For example, ACF 232 may stop a timer associated with the sent packet corresponding to the 
acknowledgment packet. A timeout mechanism may be used so that ACF 232 only waits a 
certain amount of time for acknowledgment packets. For example, ACF 232 may wait until an 
acknowledgment packet is received for each sent packet or until a predetermined period of time 
has elapsed since the reflector packets were sent, whichever occurs first. ACF 232 may then 
proceed to analyze the response times for the acknowledgment packets that were received. 
Absence of acknowledgment packets may also be considered by ACF 232 in the admission 
control analysis. 

[0032] ACF 232 may analyze acknowledgment response times in a variety of ways. For 

example, ACF 232 may analyze how long it takes for each acknowledgment packet to be 
received from the time the corresponding reflector packet was sent, and may also take into 
account response times for particular types of packets and their acknowledgments. ACF 232 
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may also take into account analyses of the response times, such as average delays for 
acknowledgment packets, the variance in delays for the acknowledgment packets, or a 
combination of these and other calculations. Other factors in addition to the acknowledgment 
response times may also be used in the admission analysis. For example, ACF 232 may receive 
information from network 200 regarding congestion or other network characteristics, and use this 
information as part of the admission analysis. ACF 232 may also consider packet loss as a factor 
in the admission analysis. Finally, acknowledgment packets may include information, such as a 
time stamp or hop count, that may be used in the admission analysis. 
[0033] Based on the admission analysis, ACF 232 may determine whether or not to 

initiate a data transfer with audio server 208. If ACF 232 decides not to initiate a data transfer 
because the state of network resources between telephone 212 and audio server 208 is not 
appropriate, ACF 232 may decide to retry the admission analysis immediately or at a later time. 
[0034] Network 200 may include network equipment that, although not providing 

guaranteed-bandwidth connections, may provide some type of connection mechanism, such as 
label-switched paths (LSPs). For example, network 200 may implement multi-protocol label 
switching (MPLS), a protocol used for establishing an LSP between one or more of network 
clients 202-218, between ACFs 220-232, or between network clients 202-218 and ACFs 220- 
232. The LSPs may be created dynamically as needed, or may be set up as static LSPs. In such 
a network, systems and methods consistent with the principles of the invention may perform 
admission analysis on one or more LSPs fully or partially connecting network clients 202-218. 

-11- 



PATENT 
Docket No. 0023-0183 



[0035] Using ACF 232 again by way of example, suppose a caller at telephone 2 1 2 wants 

to set up a call with audio server 208. And assume, for sake of example, that ACF 232 uses 
MPLS to dynamically set up LSPs or transmit data over static LSPs, although other techniques 
for paths may also be used. Telephone 212 notifies ACF 232 that a data transfer needs to be 
initiated with audio server 208. In response, ACF 232 may initiate one or more LSPs through 
network 200 to audio server 208. ACF 232 may then perform an admission analysis for one or 
more of the potential LSPs. ACF 232 might reject all the potential LSPs, or select an LSP that 
has the best characteristics based on the admission analysis. 

[0036] Each of ACFs 220-232 in Fig. 2 may implement the distributed admission control 

consistent with the principles of the invention. For example, ACF 232 may determine whether to 
initiate a data transfer with video server 202 by first determining the state of network 200 
resources using admission analysis consistent with the principles of the invention. Each of ACFs 
220-232 may also perform admission control for multiple clients. For example, ACF 220 
performs admission control for telephone 214, brokerage 216, and laptop 218. 
[0037] In embodiments consistent with the principles of the invention, admission control 

functions may be split between a client and an ACF. The client and the ACF may coordinate 
with each other regarding admission control. For example, splitting the admission control 
function may allow a client to maintain control over how the admission control process is carried 
out by the ACF. A client could download particular admission control parameters to its 
corresponding ACF, and the ACF then carries out admission control using the parameters. The 
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admission control functions and elements may be split between the client and ACF in numerous 
ways. The ACF may also upload admission control information, such as permissions, to the 
client. The admission control function could also be migrated entirely into one or more of client 
devices 202-218, as illustrated by ACF 222 in video server 202. Migrating all the ACF 
functionality into a client gives the client complete control over the admission control process. 
In such embodiments, a separate ACF connecting the client to network 200 is not necessary. 
[0038] Each of ACFs 220-232 is responsible for handling admission control for their 

clients, and initiating data transfers when the admission control process indicates that network 
200 resources are in an appropriate state for the data transfer. For example, a data transfer may 
be initiated when an ACF determines that the latency or jitter characteristics of network 200 
resources are below a certain threshold. Each of ACFs 220-232 comprises elements for carrying 
out these operations. The elements may be comprised of hardware, software, or a combination 
of hardware and software. 

[0039] Fig. 3 illustrates a system for performing distributed admission control consistent 

with the principles of the invention. The elements and functions of system 300 may be used in 
any of ACFs 220-232 or network clients 202-218. In other embodiments consistent with the 
principles of the invention, the elements and functions may be divided between a client and its 
respective ACF. For purposes of explanation, system 300 will be described as being in one of 
one of ACFs 220-232. Further, the elements and functions of system 300 may be implemented 
entirely in software, entirely in hardware, or in a combination of hardware and software. 
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[0040] System 300 includes an interface 302, network links 304, a local application 306, 

a packet transmit/receive (T/R) element 308, and an acknowledgment analyzer 310. Links 304 
may be connected to network 200 and one or more clients via interface 302. The connection to 
these elements may be direct or through other devices. 

[0041] Local application 306 carries out local functions for system 300. For example, in 

ACFs 220-232, local application 306 may be dedicated to managing admission control, packet 
routing, and other functions for one or more clients. Local application 306 creates application 
information that is sent to packet T/R 308. Packet T/R 308 packetizes the information and 
transmits the packets to interface 302. 

[0042] Interface 302 handles protocol layer processing on the packets and forwards 

packets on one or more of links 304. Packets arriving on links 304 are received by interface 302, 
which may process the packets, and forward them to packet T/R 308. 

[0043] Packets flowing into and out of system 300 may be network traffic, application- 

related packets, control-related packets, or any other type of packet. For application-related 
packets, packet T/R 308 depacketizes the application information and forwards the application 
information to local application 306 for processing. For control-related packets, packet T/R 308 
depacketizes the control information and may act on it. Packet T/R 308 may also forward the 
control information to other elements in system 300 or place the control information in packets 
and send them back out on links 304 to other network clients, or do both - act on the information 
and forward the information back out. The control information may include, for example, 
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information about network 200 generally, and information regarding network resources, such as 
congestion, network topology, or other network-related information. The control information 
may also include information from other devices in network 200, such as acknowledgments or 
path setup information. 

[0044] To initiate a data transfer, assume that a client has sent a request to system 300 to 

initiate a data transfer with a particular network client. For example, assume that in Fig. 2 a 
caller at telephone 212 wants to set up a data transfer with audio server 208. In this case, ACF 
232 handles the admission control process for telephone 212. ACF 232 includes system 300 of 
Fig. 3. 

[0045] Returning to Fig. 3 , the data transfer initiation request from telephone 2 1 2 may 

include information regarding the type of data transfer to be initiated, minimum data transfer 
requirements that must be met, or some combination of these types of information. Local 
application 306 receives the request and notifies packet T/R 308 that a data transfer needs to be 
initiated with audio server 208. Packet T/R 308 then performs an admission control process to 
determine whether or not the data transfer should be initiated, consistent with the principles of 
the invention. 

[0046] Packet T/R 308 first coordinates with acknowledgment analyzer 3 10 to determine 

whether the state of network 200 resources is appropriate for a data transfer to be initiated 
between telephone 212 and audio server 208. Packet T/R 308 may send out one or more 
reflector packets to audio server 208, and may provide acknowledgment analyzer 310 with 
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information about the reflector packets. The information may include, for example, 
identification (ID) information for each reflector packet, packet type information, and the time 
each reflector packet is transmitted. Packet T/R 308 may also send to acknowledgment analyzer 
310 information regarding the type of data transfer to be initiated, minimum data transfer 
requirements that must be met, and other information regarding the data transfer to be initiated. 
[0047] Audio server 208 receives the reflector packets and responds by sending a 

response packet, such as an acknowledgment packet, back to system 300. Network interface 302 
receives the acknowledgment packets over links 304 and forwards them to packet T/R 308. 
Acknowledgment analyzer 310 also receives the acknowledgment packets. 
[0048] Acknowledgment analyzer 3 1 0 performs admission analysis based on information 

regarding the reflector packets, information regarding the acknowledgment packets, or some 
combination of these. The results of the analysis are forwarded to packet T/R 308. If packet T/R 
308 determines that a data transfer can be initiated, packet T/R 308 proceeds to coordinate with 
local application 306 to initiate the data transfer between the network clients. If packet T/R 308 
determines that a data transfer should not be initiated, however, packet T/R 308 may end this 
admission control effort. If the effort is abandoned, packet T/R 308 may send an admission 
status message, such as an initiation rejection indication, to telephone 212, or coordinate with 
local application 306, telephone 212, or both, to determine whether the data transfer still needs to 
be initiated. 
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[0049] Packet T/R 308 may have multiple admission analyses in progress. For example, 

packet T/R 308 may have one or more admission analysis threads being executed simultaneously 
for one or more admission efforts. When multiple threads are working on an admission analysis 
for one source-destination pair, packet T/R 308 may implement the threads so that the first 
successful thread stops the other threads. Alternatively, the results of multiple successful threads 
may be compared by packet T/R 308, which then chooses the best of the successful threads. 
[0050] In LSP-capable networks, system 300 may perform admission analysis on one or 

more LSPs, as discussed above. Packet T/R 308 may forward one or more packets on one or 
more potential LSPs. Acknowledgment analyzer 3 10 may analyze the acknowledgment packets 
for each of the LSPs. Based on the admission analysis, acknowledgment analyzer 310 may 
reject all the LSPs or select one or more of them for data transfer. If one of the LSPs is selected, 
packet T/R 308 notifies local application 306 that a suitable LSP was found. Local application 
306 and packet T/R 308 then coordinate the process of initiating the data transfer between 
telephone 212 and audio server 208. 

[0051] Fig. 4 illustrates an exemplary embodiment of acknowledgment analyzer 3 10 of 

Fig. 3 consistent with the principles of the invention. In this embodiment, acknowledgment 
analyzer 310 includes an analyzer manager 402, a timer 406, and a table 404. Analyzer manager 
402 is connected to network interface 302, packet T/R 308, timer 406, and table 404. Analyzer 
manager 402 uses table 404 to track acknowledgment packets corresponding to each reflector 
packet sent by packet T/R 308 as part of an admission control process. Table 404 includes 
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entries for each reflector packet that was sent. Each entry may include a packet ID field, a 
packet type field, and an elapsed time field. The elapsed time field may be used for tracking the 
elapsed time between when a reflector packet is sent by packet T/R 308 and when analyzer 
manager 402 receives an acknowledgment packet corresponding to the packet. Table 404 may 
be replicated for each admission analysis being performed. 

[0052] Analyzer manager 402 receives information from packet T/R 308 regarding the 

reflector packets, such as packet IDs, the types of reflector packets, and the times reflector 
packets are sent to a destination, and uses the information to create entries in table 404. 
Analyzer manager 402 also resets and starts timer 406 to track the total time analyzer manager 
402 waits for acknowledgment packets. As analyzer manager 402 receives each 
acknowledgment packet from network interface 302, it updates the entry in table 404 
corresponding to the reflector packet which elicited the acknowledgment packet. 
[0053] Analyzer manager 402 also monitors timer 406 to determine the elapsed time 

since the reflector packets were sent by packet T/R 308 to the destination. If timer 406 reaches a 
predetermined limit, analyzer manager 402 may proceed with the admission analysis. Reaching 
a predetermined time limit before receiving an acknowledgment packet for each reflector packet 
may result from several problems, such as packets lost in the network, the destination not 
responding, or some other condition. 

[0054] Fig. 5 illustrates a flowchart implementing an embodiment of admission control 

consistent with the principles of the invention. The acts illustrated in Fig. 5 may, for example, be 
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performed by system 300 of Fig. 3. To start the admission control process, N reflector packets 
(where, e.g., N >= 1) are transmitted to a destination (act 500). The process then waits until 
acknowledgment packets are received for each of the N packets or until a time period T tim eout has 
elapsed, whichever occurs first (act 502). 

[0055] The response times associated with each acknowledgment packet are analyzed 

(act 504) to determine the state of the resources in the network, and a decision is made as to 
whether or not a data transfer should be initiated. The decision may, for example, be based on 
whether the mean of the acknowledgment response times exceeds a threshold M, or whether the 
variance of the acknowledgment response times exceeds a threshold V (act 506). The decision 
may also be based on a combination of these factors, or these factors and other factors, such as 
packet loss. If it is determined that a data transfer should not be initiated at this time, the process 
returns to sending N packets (act 500) to start another admission analysis process. In one 
embodiment, the process waits a period of time Y (act 508) before sending the N packets (act 
500) in order to allow time for the state of the network resources to change. In one embodiment, 
a decision is made to simply stop attempting to initiate a data transfer. 

[0056] Fig. 6 illustrates a flowchart for implementing distributed admission control in a 

network having a path-creation mechanism, such as LSPs using MPLS, consistent with the 
principles of the invention. A separate admission analysis may be performed for a single LSP, or 
each of several LSPs. 
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[0057] The process illustrated in Fig. 6 is similar in some respects to the process 

illustrated in Fig. 5. For example, sending N packets (act 604), waiting until all acknowledgment 
packets are received or a time period T time o U t elapses (act 610), analyzing the acknowledgment 
packets (act 612), determining whether to initiate a data transfer (act 614), and waiting for time 
period Y (act 616) are similar to acts in the process illustrated in Fig. 5. 
[0058] The admission control process of Fig. 6 begins by setting a variable A to zero (act 

600). Variable A identifies individual LSPs used in the admission analysis. LSP A is first 
selected (act 602). This may involve first setting up an LSP or selecting a known LSP between a 
first and a second network client. Then, similar to Fig. 5, N reflector packets are sent via LSP A 
to a destination (act 604). Variable A is incremented (act 606) and checked to determine 
whether all LSPs to be included in the admission analysis have been used. In the embodiment 
illustrated in Fig. 6, there are four LSPs that will be included in the analysis (act 608). That is, 
four LSPs, LSPs 0-3, will have packets sent on them. If A does not equal four, the process 
repeats with selecting the next path A (act 602). The loop continues until each of LSPs 0-3 have 
packets sent on them. 

[0059] When variable A equals four (act 608), meaning packets have been sent across 

each of LSPs 0-3, the process continues by waiting for N acknowledgment packets for each LSP, 
or until time period T time0 ut elapses, whichever occurs first (act 610). In one embodiment, a 
separate expiration timer is maintained for each LSP. Alternatively, admission analysis may 
start immediately upon receiving N acknowledgment packets for a single LSP. The 
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acknowledgment packets for each LSP are analyzed (act 612), and it is determined whether a 
data transfer should be initiated on one or more of the LSPs based on whether the mean of the 
acknowledgment response times exceeds a threshold M, or whether the variance of the 
acknowledgment response times exceeds a threshold V (act 614). The decision may also be 
based on a combination of these factors, or these factors and other factors, such as packet loss. If 
no suitable LSP is found, the process may continue by setting variable A to zero (act 600) to 
initiate another analysis of LSPs. In one embodiment, the process waits time period Y before 
initiating another analysis (act 616). Initiation of a data transfer may also be dropped 
completely. In one embodiment, the process is repeated only for a subset of the LSPs that were 
originally analyzed. This may be helpful in instances where certain paths are found to be so 
unsuitable in a first analysis that they should not be included in a subsequent analysis. 

CONCLUSION 

[0060] As described, admission control is implemented in a network. Packets are sent to 

a destination, which sends acknowledgements back to the packet source. The acknowledgment 
responses are analyzed to determine a state of the network resources between the packet source 
and the destination. The foregoing description of embodiments of the invention provides 
illustration and description, but is not intended to be exhaustive or to limit the invention to the 
precise form disclosed. Modifications and variations are possible in light of the above teachings 
or may be acquired from practice of the invention. 
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[0061] For example, although the admission control analysis has been described as being 

performed in response to a specific data transfer initiation request, the analysis may also be 
performed on an ongoing basis for various parts of a network or various destinations. When a 
client desires to initiate a data transfer, the ACF may have already analyzed the state of the 
network for the request. This may be useful in circumstances when one client initiates frequent 
data transfers with a particular other client, or for cutting down the latency of the admission 
control facility. 

[0062] Although the admission control process is described herein as being performed at 

the "edge" of the network, admission control consistent with the principles of the invention may 
be practiced anywhere in a network. 

[0063] The admission control systems and methods described herein have been described 

primarily in terms of an initiator of a data transfer. It should be understood, however, that 
admission control may be performed for any data transfer in any direction. For example, clients 
at one or both ends of a communication session may have admission control processes carried 
out for data transfer. Both sources and sinks of data transfers may perform admission control 
consistent with the principles of the invention. 

[0064] For purposes of explanation, the term "packet" is used herein, although any 

network data transfer unit may be used. The particular type of data transfer unit depends on the 
type of network the data is transported over. 
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[0065] Moreover, while a series of acts has been presented in describing embodiments 

consistent with the principles of the invention, the order of the acts may be different in other 
implementations consistent with principles of the invention and non-dependent acts may be 
performed in parallel. Additionally, lines with arrows are used in the figures to generally 
illustrate the flow of data. In practice, embodiments consistent with the principles of the 
invention may send data on these lines in both directions. No element, act, or instruction used in 
the description of the present application should be construed as critical or essential to the 
invention unless explicitly described as such. Also, as used herein, the article "a" is intended to 
include one or more items. Where only one item is intended, the term "one" or similar language 
is used. 

[0066] The scope of the invention is defined by the claims and their equivalents. It is 

intended that the specification and examples be considered as exemplary only, with the true 
scope and spirit of the invention being indicated by the following claims. 
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